Archive
1 February 2006
Vulnerabilities first published on this day (UTC), newest first.
60 results · Feed
-
Unscored —CVE-2006-0510 Public exploit
SQL injection vulnerability in userlogin.jsp in Daffodil CRM 1.5 allows remote attackers to execute arbitrary SQL comma…
-
Unscored —
zbattle.net Zbattle client 1.09 SR-1 beta allows remote attackers to cause an unspecified denial of service by rapidly …
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in Nuked-klaN 1.7 allows remote attackers to inject arbitrary web…
-
Unscored —
Easy CMS stores the images directory under the web document root with insufficient access control and browsing enabled,…
-
Unscored —CVE-2006-0509 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in clients.php in Cerberus Helpdesk, possibly 2.7, allow remote att…
-
Unscored —
Blackboard Academic Suite 6.0 and earlier does not properly clear session information when de-authenticating a user who…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Easy CMS allow remote attackers to inject arbitrary web script o…
-
Unscored —
Cross-site scripting (XSS) vulnerability in MyCO Guestbook 1.0 allows remote attackers to inject arbitrary web script o…
-
Unscored —CVE-2006-0502 Public exploit
PHP remote file inclusion vulnerability in loginout.php in FarsiNews 2.1 Beta 2 and earlier, with register_globals enab…
-
Unscored —
MyCO Guestbook 1.0 stores the admin directory under the web document root with insufficient access control, which allow…
-
Unscored —
Cross-site scripting (XSS) vulnerability in rlink.php in Rlink 1.0.0 module for phpBB allows remote attackers to inject…
-
Unscored —
Unspecified vulnerability in MailEnable Enterprise Edition before 1.2 allows remote attackers to cause a denial of serv…
-
Unscored —
IMAP service in MailEnable Professional Edition before 1.72 allows remote attackers to cause a denial of service (servi…
-
Unscored —
Mail::Audit module in libmail-audit-perl 2.1-5, when logging is enabled without a default log file specified, uses pred…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in PHP GEN before 1.4 allow remote attackers to inject arbitrary we…
-
Unscored —
Multiple SQL injection vulnerabilities in PHP GEN before 1.4 allow remote attackers to inject arbitrary SQL commands vi…
-
Unscored —
Unspecified vulnerability in the "privilege management" feature of Sun Solaris 10 allows local users to cause a denial …
-
Unscored —
TellMe 1.2 and earlier, when the Server (o_Server) and HEAD (o_Head) options are enabled, allows remote attackers to ob…
-
Unscored —
Gaim-Encryption 2.38-1 on Debian Linux allows remote attackers to cause a denial of service (crash) via a crafted messa…
-
Medium —
Apache Tomcat Discloses MS-DOS Pathname
Apache Tomcat 4.0.3, when running on Windows, allows remote attackers to obtain sensitive information via a request for a file that contains an MS-DOS device name such as lpt9, which leaks the pathname in an error message, as demonstrated by lpt9.xtp using Ni…
-
Unscored —
Symantec Brightmail AntiSpam 6.0 build 1 and 2 allows remote attackers to cause a denial of service (bmserver component…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in PHP GEN before 1.3 allow remote attackers to inject arbitrary we…
-
Unscored —
Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 8.1 through SP3, 7.0 through SP6, and 6.1 through…
-
Unscored —CVE-2005-4696 Public exploit
The Microsoft Wireless Zero Configuration system (WZCS) stores WEP keys and pair-wise Master Keys (PMK) of the WPA pre-…
-
Unscored —CVE-2005-4694 Public exploit
Unspecified vulnerability in the www_add method in Asset.pm in Plain Black WebGUI 6.3.0 and other versions before 6.7.6…
-
Unscored —
Unspecified vulnerability in Process File System (procfs) in Sun Solaris 10 allows local users to obtain sensitive info…
-
Unscored —CVE-2005-4702 Public exploit
SQL injection vulnerability in the favorites module in index.php in IPBProArcade 2.5.2 allows remote attackers to injec…
-
Unscored —
Argument injection vulnerability in TellMe 1.2 and earlier allows remote attackers to modify command line arguments for…
-
Unscored —
Unspecified vulnerability in mroovca stats (mroovcastats) before 0.4.5b has unknown attack vectors and impact, related …
-
Unscored —CVE-2005-4698 Public exploit
Cross-site scripting (XSS) vulnerability in TellMe 1.2 and earlier allows remote attackers to inject arbitrary web scri…
-
Unscored —
BEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7, when a Java client appl…
-
Unscored —
The Microsoft Wireless Zero Configuration system (WZCS) allows local users to access WEP keys and pair-wise Master Keys…
-
Unscored —
VMware ESX Server 1.5.2 before Patch 4 allows local users to execute arbitrary programs as root via certain modified VM…
-
Unscored —
Certain Cisco IOS releases in 12.2S based trains with maintenance release number 25 and later, 12.3T based trains, and …
-
Unscored —
Multiple unspecified vulnerabilities in Tumbleweed MailGate Email Firewall (EMF) 6.x allow remote attackers to (1) trig…
-
Unscored —
Buffer overflow in the font command of mIRC, probably 6.16, allows local users to execute arbitrary code via a long str…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Add Thread to Favorites feature in usercp2.php in MyBB (aka MyBulletinB…
-
Unscored —
Cross-site scripting (XSS) vulnerability in MG2 (formerly known as Minigal) 0.5.1 allows remote attackers to inject arb…
-
Unscored —
SQL injection vulnerability in login.asp in ASPThai.Net ASPThai Forums 8.0 and earlier allows remote attackers to execu…
-
Unscored —CVE-2006-0491 Public exploit
SQL injection vulnerability in SZUserMgnt.class.php in SZUserMgnt 1.4 allows remote attackers to execute arbitrary SQL …